Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/fZ5ETbFeDh6kO0WjWDuxHBfD1eg.roa
File: fZ5ETbFeDh6kO0WjWDuxHBfD1eg.roa (raw, json)
Hash identifier: 0HDYxxH9XLUgaVAG5CxTs7AkK4YGsBtglCIpuSXnIkM=
Subject key identifier: 7D:9E:44:4D:B1:5E:0E:1E:A4:3B:45:A3:58:3B:B1:1C:17:C3:D5:E8
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 018201346FA9578735E53F94F7108B15AEFE
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/fZ5ETbFeDh6kO0WjWDuxHBfD1eg.roa
Signing time: Fri 15 Jul 2022 09:33:09 +0000
ROA not before: Fri 15 Jul 2022 09:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47904
IP address blocks: 91.216.54.0/24 maxlen: 24
91.223.115.0/24 maxlen: 24
2001:67c:2324::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:34:6f:a9:57:87:35:e5:3f:94:f7:10:8b:15:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jul 15 09:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d9e444db15e0e1ea43b45a3583bb11c17c3d5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:de:4f:e2:76:8e:f5:6a:b2:d8:fa:f8:e8:
20:a3:eb:44:82:c0:1d:27:73:fd:ba:13:9b:df:d0:
ad:39:c1:a0:43:8f:27:ea:e4:67:cf:9a:9f:78:06:
10:89:0f:9e:40:04:a1:81:88:8a:12:3f:e6:d4:cc:
9d:c5:92:d4:0e:5e:c1:f6:d5:5d:f0:21:75:d3:37:
cf:6b:26:7f:5b:e5:c9:40:39:02:ea:cb:cf:99:17:
a3:50:3b:89:18:11:84:0f:f8:0e:f6:f5:09:74:0d:
69:03:54:c1:61:fa:cb:f5:5f:e7:3a:33:d7:68:bc:
2a:4e:34:43:89:4b:56:d6:63:18:15:2c:ae:72:24:
2f:07:27:cf:ad:d1:96:a5:d3:52:a3:60:42:dd:6d:
16:3b:8b:74:46:04:0c:79:51:b8:08:19:69:b0:76:
27:ea:04:6c:3c:bc:76:ba:50:2d:0a:52:ad:9e:09:
82:b5:4a:78:ae:c6:aa:b8:f3:59:b0:8c:b3:33:4b:
25:6b:c4:f8:2b:d2:c3:66:34:84:cd:d4:be:83:5a:
94:fb:99:26:bc:3a:e1:5e:f3:0b:ef:db:6f:4c:d1:
b4:5e:75:b2:48:4d:8c:92:98:7a:03:42:20:84:a1:
62:c8:f8:f3:b6:1a:77:44:b8:4c:92:e8:57:26:ee:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:44:4D:B1:5E:0E:1E:A4:3B:45:A3:58:3B:B1:1C:17:C3:D5:E8
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/fZ5ETbFeDh6kO0WjWDuxHBfD1eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.54.0/24
91.223.115.0/24
IPv6:
2001:67c:2324::/48
Signature Algorithm: sha256WithRSAEncryption
3a:12:7b:d4:66:ef:aa:08:03:f9:b7:52:1e:d3:0f:02:b7:dc:
f5:1b:19:a8:9a:de:30:f3:e4:24:1a:13:e9:4a:b3:1d:9f:bf:
ec:84:25:f2:b8:90:ea:ef:0f:ef:4f:fe:54:06:5a:4a:0c:55:
f1:85:bf:90:f7:8a:99:40:31:ec:5d:9a:c6:76:e3:68:06:23:
e8:de:31:aa:43:f5:0a:47:1a:26:5a:f7:61:5f:ee:1c:5f:66:
6e:88:7c:81:f3:17:74:b2:cd:51:35:d7:73:84:5e:99:5c:5c:
c1:91:d4:8a:9f:6c:0f:9d:bf:ac:50:76:2a:db:a1:4b:67:70:
82:ed:52:84:31:f7:dc:e6:35:b0:3a:90:98:48:24:ff:77:ea:
6f:85:5a:a4:60:c3:12:3d:27:c4:5b:eb:38:66:cf:a4:6a:01:
2e:89:4c:c0:70:c9:5d:6c:ad:95:74:1b:d4:e1:4a:fc:c4:31:
c8:5f:33:55:09:e7:c8:90:09:f8:84:bc:58:77:83:29:ba:4f:
6a:0a:83:1c:81:49:a3:2f:c4:f3:ee:c2:ee:b1:89:22:01:bd:
73:aa:b8:9f:1f:c8:ec:aa:4b:97:e9:84:7b:23:2d:72:f2:fb:
d9:b2:2d:e2:7e:db:b1:8e:4d:a5:8f:fe:08:30:08:58:85:c6:
73:c3:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:30 2024 by rpki-client on console-ams.rpki-client.org